Privacy Policy of www.villabertaresort.com
Resort restaurant Villa Berta srl, located in Località Rocchetta snc, 62027 San Severino Marche (MC), VAT number 02112800434, (hereinafter referred to as the “Controller”), respects your privacy and is committed to protecting your personal data. We want you to be informed and aware of how your data is used when you access our services. Please read this Privacy Policy carefully before using our website or signing up for any of our services. Alongside our Terms and Conditions and Cookie Policy, this document outlines how we handle your personal data and why.
Data Controller
The data controller is Resort restaurant Villa Berta srl, Località Rocchetta snc, 62027 San Severino Marche (MC), VAT number 02112800434. We process your information as described in this Privacy Policy.
Data Protection Officer (DPO)
The Controller has not appointed a Data Protection Officer (DPO), as the nature of the data processing activities does not fall within the mandatory designation requirements under Article 37 of Regulation (EU) 679/2016.
Categories of Personal Data Processed
We collect and process the following types of personal data:
-
Contact data: name, address, phone number, mobile number, email address, and if you register via social login, the public information available on your social profile based on your privacy settings.
-
Social login data: account information and other data provided through the social network used to access the site.
-
Website usage data: information about your navigation, including email interactions and data collected through cookies. For further details, please see our Cookie Policy.
Each time you visit our website, we may automatically collect:
-
Technical information: IP address, browser type and version, time zone setting, operating system, and device information.
-
Visit data: pages viewed, page response times, download errors, visit duration, page interaction data (scrolling, clicks, mouse movements), and data entered while browsing.
Purposes of Data Processing
Personal data is processed lawfully, fairly, and transparently for the following purposes:
-
Website operation and maintenance: to ensure site security and functionality.
Legal basis: legitimate interest of the Controller. -
Replying to contact form requests: to respond to questions or inquiries submitted via our contact form.
Legal basis: user consent. -
Navigation and service improvement: to enhance the browsing experience and the services provided through the website.
Legal basis: legitimate interest of the Controller.
Data Processing Methods and Retention Period
Your personal data is processed using both paper and digital means, applying appropriate security and confidentiality measures.
-
Data submitted through contact forms will be retained as long as necessary to fulfill your request, or until you request its deletion.
-
Browsing data will be retained for a maximum of 6 months, unless otherwise required by law.
Data Sharing
Your data may be disclosed to:
-
Third-party service providers for website and IT system management.
-
Legal and tax advisors.
-
Regulatory or judicial authorities, where required by law.
These entities may act as Data Processors under contract or as independent Data Controllers, depending on their role.
Transfer of Data Outside the European Union
We use third-party services such as Google Analytics and Google reCAPTCHA, which may involve the transfer of personal data outside the EU (e.g., to the United States). These transfers are safeguarded by Standard Contractual Clauses (SCCs) approved by the European Commission or other lawful mechanisms.
User Rights
As a data subject, you have the right to:
-
Access: obtain confirmation and access to your personal data and how it is used.
-
Rectification: request correction of inaccurate or incomplete data.
-
Erasure (Right to be Forgotten): request deletion of your data under certain conditions.
-
Restriction: request restricted processing of your data.
-
Objection: object to processing based on legitimate interest.
-
Data portability: receive your data in a structured, commonly used, and machine-readable format.
To exercise your rights, contact us at: info@villabertaresort.com
Complaints
If you believe that your personal data has been processed unlawfully or in violation of the GDPR, you have the right to file a complaint with the Italian Data Protection Authority (Garante per la Protezione dei Dati Personali) at www.garanteprivacy.it or to take legal action.
Last update: May 7, 2025